high7.8Public exploit code
CVE-2017-0160
Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Rem…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows - ManagementObject Arbitrary .NET Serialization Remote Code Execution2017-04-20 · remote · windows · Verified
Impact
Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Remote Code Execution Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | .Net Framework | Versions 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97447
- http://www.securitytracker.com/id/1038236
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0160
- https://www.exploit-db.com/exploits/41903/
- http://www.securityfocus.com/bid/97447
- http://www.securitytracker.com/id/1038236
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0160
- https://www.exploit-db.com/exploits/41903/